Create API user that cannot login to portal

[David Pilkington]

I want to create a user that I can use to pull from a repo. This is easy enough to do except for the fact that I would also like for this user NOT to be able to log in to the portal.

The use case for this requirement is the user on my build machine. This a  dumb user that just pulls from the repo when it needs to.

Is the creation of such a user possible?

[jredmond]

Two options come to mind here.

1. Access key - give your build system a special SSH key that can read from specific repos, but not write to them.

BB Server (on-prem): https://confluence.atlassian.com/bitbucketserver/ssh-access-keys-for-system-use-776639781.html

BB Cloud (bitbucket.org): https://confluence.atlassian.com/bitbucket/use-access-keys-294486051.html

2. You can also use application passwords to grant specific permissions for specific uses. Application passwords do not work on the UI login, but if you configure them appropriately then you can use them for whatever your build system needs.

At the moment, this is only an option for BB Cloud: https://confluence.atlassian.com/bitbucket/app-passwords-828781300.html